sample
5ca5dcf89c8f9759bbe13ebf177de259492afe83c55f6e4d2c4ba2a2dbc04937
A Cobalt Strike sample, identified from its own bytes without running it (a Cobalt Strike beacon stage downloaded from its listener).
5ca5dcf89c8f9759bbe13ebf177de259492afe83c55f6e4d2c4ba2a2dbc04937
TLP:CLEAR
Sample
sha-2565ca5dcf89c8f9759bbe13ebf177de259492afe83c55f6e4d2c4ba2a2dbc04937
familyCobalt Strike
identified byfile analysis
first seen2026-10-28 09:04 UTC
last seen2026-10-28 09:04 UTC
Served by 1 address
A widely distributed file can reach unrelated hosts.
- 85.175.101.203:80 Cobalt Strike